CVE-2014-9432

Published: Dec 31, 2014

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in templates/2k11/admin/overview.inc.tpl in Serendipity before 2.0-rc2 allow remote attackers to inject arbitrary web script or HTML via a blog comment in the QUERY_STRING to serendipity/index.php.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://packetstormsecurity.com/files/129709/CMS-Serendipity-2.0-rc1-Cross-Site-Scripting.html

x_refsource_MISC

serendipity-index-xss(99464)

vdb-entry

x_refsource_XF

20141223 Stored XSS Vulnerability in CMS Serendipity v.2.0-rc1

mailing-list

x_refsource_BUGTRAQ

http://blog.s9y.org/archives/259-Serendipity-2.0-rc2-released.html

x_refsource_CONFIRM

http://sroesemann.blogspot.de/2014/12/bericht-zu-sroeadv-2014-02.html

x_refsource_MISC

20141223 Stored XSS Vulnerability in CMS Serendipity v.2.0-rc1

mailing-list

x_refsource_FULLDISC

https://github.com/s9y/Serendipity/commit/36cde3030aaa27a46bf94086e062dfe56b60230b

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2014-9432

Description

Affected Products

References